Privacy Policy

This policy explains what PostKit collects, why, and who it is shared with. We keep data collection to the minimum needed to run the tool. PostKit is operated by George Charbel, Beirut, Lebanon.

1.What we collect

• Your email address, which you provide to start the free trial or to receive support. It is used to run the trial fairly and to contact you about your access.
• Google sign in details, if you choose to sign in with Google: your name, email address and profile picture, as supplied by Google. We use these only to identify your account and show your credits.
• Your access code, if you are on a paid plan, along with how many generations it has used.
• Technical identifiers: your IP address and a random device identifier generated in your browser. These are used only to enforce free trial limits and to protect the service from abuse.
• The content you enter to generate posts: your brand name, business type, the topic or prompt you describe, tone and language choices, and any website address you ask us to read for ideas.
• Reference photos you upload, if you choose to, so the AI can match a visual style.
• Basic, privacy-friendly usage analytics (page visits) to understand how the site is used. Our analytics tool does not use cookies and does not track you across other websites.

We do not ask for or store passwords. If you choose to sign in with Google, Google confirms your identity for us and we never see your Google password.

2.What stays on your own device

Your saved brand kits, templates, post history and preferences are stored locally in your browser (using localStorage), not on our servers. They stay on your device and are cleared if you clear your browser data. This means your creative work mostly never leaves your own computer or phone except when a single generation is sent for processing.

3.How we use your information

• To provide the service: generate the posts, captions and images you request.
• To run the free trial and paid access codes, and to count usage against your plan.
• To protect PostKit from abuse, spam and runaway costs (rate limits and daily caps).
• To respond to your messages and provide support.
• To understand overall usage and improve the tool.

We do not sell your personal data, and we do not use your prompts or uploaded photos to train our own models.

4.Who we share it with (service providers)

To generate content and run the site, your inputs are passed to trusted third-party services. Each receives only what is needed to do its job:

Provider	Purpose
Cloudflare	Runs our backend and stores trial counters, access codes and your trial email.
GitHub Pages	Hosts the website.
Anthropic (Claude)	Generates text and describes any reference photos you upload.
OpenAI, Ideogram, Recraft, Google	Generate the images from your prompts.
Google (Sign in)	Verifies your identity if you choose to sign in with Google.
GoatCounter	Cookieless visit analytics.
WhatsApp (Meta)	Support and arranging payment, if you contact us there.
Whish / OMT / banks	Processing payments. We never see or store your full card or account details.

These providers operate their own infrastructure, some of it outside Lebanon, so using PostKit involves your inputs being processed internationally by them under their own privacy terms.

5.Reference photos and prompts

When you upload a reference photo, it is sent to the AI to produce a short style description, then used to guide generation. When you enter a prompt or a website link, that text is sent to the AI provider to create your content. We do not build a permanent library of your uploads, and we do not repurpose them beyond fulfilling your request.

6.Cookies and tracking

PostKit does not use advertising or cross-site tracking cookies. We use browser localStorage to remember your settings and access on your device, and a cookieless analytics tool that counts visits without identifying you.

7.How long we keep data

• Trial email records and usage counters are kept while they are needed to enforce limits and support your account. Short-lived anti-abuse counters expire automatically.
• Data stored in your browser stays until you clear it yourself.
• You can ask us to delete your email and any related records at any time (see below).

8.Your choices and rights

You can ask us to access or delete the personal data we hold about you (mainly your email and usage records) by contacting us. If you signed in with Google, you can sign out at any time from the menu, and you can also remove PostKit's access from your Google account settings. You can clear the data stored on your device at any time through your browser settings. To exercise any of this, message us on WhatsApp or email us at the contacts below.

9.Security

Secret keys and payment credentials are held securely on the server side and are never exposed in the website. We take reasonable measures to protect your information, but no online service can be guaranteed completely secure.

10.Children

PostKit is intended for businesses and users aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18.

11.Changes to this policy

We may update this policy as PostKit evolves. The "last updated" date above always shows the current version.

12.Contact

For any privacy question or request, message us on WhatsApp at +961 79 106 883 or email georgescharbel6@gmail.com.